Privacy & cookies

Effective October 14, 2026

The African American Community Service Agency (AACSA) runs sjaacsa.org, including the pages for our MLK Luncheon, Juneteenth in the Streets and Anniversary Gala. This notice explains what we collect, why we collect it, who helps us, and the choices you have.

In short

• We do not sell your personal information.
• We collect what you send us through our forms, plus basic visit statistics if you allow them.
• You choose which cookies run. Use the Cookie settings link in the footer at any time.
• You can unsubscribe, or ask us to show, correct or delete your information. Email info@sjaacsa.org.

1 · What this notice covers

This notice covers sjaacsa.org and the event pages on it. It does not cover other websites we link to, such as Donorbox, Eventbrite or VolunteerLocal. Each of those has its own notice, and we link to them below.

2 · Who we are and how to reach us

AACSA is a nonprofit in San Jose. We have served Santa Clara County since 1978.

• African American Community Service Agency
• 304 N. 6th Street, San Jose, CA 95112
• Phone: (408) 292-3157
• Email: info@sjaacsa.org

For anything in this notice, such as a question or a request about your information, email info@sjaacsa.org.

3 · What we collect and why

We collect information in two ways. You give it to us, or our site and the services we use collect it as you browse. Here it is by activity.

Contact forms

On the Contact Us page and the MLK and Juneteenth contact pages you can send us a message. We collect your name, email address, phone number (on some forms), a subject (on the Contact Us page) and your message. We use it to answer you.

Newsletter and event updates

The Stay in touch form in our footer collects your email address, first name and last name. The Juneteenth updates form collects your name and email address. When you sign up, your name and email go to AACSA's mailing list. We use them to send the news, events and ways to help you asked for. Every email has an unsubscribe link.

Event applications

Vendors, sponsors and souvenir booklet advertisers apply through our forms. Some forms are on our site. Some are run by Fillout or QuestionScout. We ask for your business or organization name, address, contact name, phone number and email address, and sometimes your website and social media handles, the package or ad you chose, and how you plan to pay. We do not collect card numbers on these forms. We use this information to review applications, contact you, and run our events.

Donations

Donations are made in a Donorbox window. You enter your details there, not on our site. We receive a record of your gift, such as your name, contact details and amount, so that we can thank you, send a receipt and keep our books.

Membership and sign-in

Memberstack runs sign-in and membership accounts on our site. When you join or log in we collect your name, email address, password and membership plan, and a profile picture if you add one. Paid memberships are paid through Stripe. Your password is handled by Memberstack. Your sign-in token is stored in your browser only while you are signed in.

Shop

Our online shop runs on Webflow. When you order, we collect your name, email address, shipping address and order details. Stripe or PayPal takes your payment. We do not see or store your full card number.

Volunteering, bookings and tickets

Volunteer sign-up is on VolunteerLocal. Facility booking uses a Google Form. Event tickets are sold on Eventbrite. Those services collect what their forms ask for, under their own notices.

Site statistics

If you allow Statistics, we use Google Analytics to count visits and see which pages people use. It records things like the pages you view, your device and browser, your approximate location and how you found us. We use it in total, to improve the site. We do not use it to identify you, and we do not use it for advertising. We load Google Analytics with Google signals off.

Videos and embeds

YouTube videos start only after you press play. They use YouTube's privacy-enhanced mode. The Juneteenth map (made with Spline) and one policy page embed (made with Embedly) load only if you allow Video & embeds. Until then, those services get nothing from your visit.

Collected automatically

When you visit, our hosting and security providers, Webflow and Cloudflare, log standard technical information. That includes your IP address, browser and device type, the pages you request, the page that sent you, and the date and time. We need this to deliver the site and keep it secure. Our fonts load from Google Fonts, so Google also receives your IP address when a page loads.

We also use information to keep the site working, to improve it, and to meet legal, tax and accounting duties.

4 · Who we share with

We share information only with the service providers that help us run the site and our programs, and only for that job:

• Webflow: hosts the site, our forms and the shop. Privacy notice
• Cloudflare: delivers the site securely. Privacy notice
• Memberstack: membership accounts and sign-in. Privacy notice
• Stripe and PayPal: take card and PayPal payments for the shop and memberships. Stripe · PayPal
• Donorbox: takes donations. Privacy notice
• Google: Analytics, Fonts, YouTube and Google Forms. Privacy notice
• Fillout and QuestionScout: run some of our application forms. Fillout · QuestionScout
• VolunteerLocal and Eventbrite: volunteer sign-up and tickets. VolunteerLocal · Eventbrite
• Spline and Embedly: the map and one embed, if you allow Video & embeds. Spline · Embedly

We may also share information when the law requires it, or to protect the safety of our community, staff or visitors.

We do not sell your personal information, and we do not share it for advertising.

5 · Cookies and similar storage

Cookies are small files that a website saves in your browser. Some sites use similar browser storage too. We keep both to a minimum, and we sort them into three groups.

• Necessary: always on. The site, forms, shop, payments and sign-in need them.
• Statistics: off until you allow them, and always off with Global Privacy Control. They help us count visits.
• Video & embeds: off until you allow them. They let outside players and the map load.

Two notes. First, our shop software loads Stripe and PayPal on every page, so they can set cookies even if you never visit the shop. We cannot switch that off. It is why they are listed as Necessary. Second, the Memberstack sign-in token appears only while you are signed in.

Providers set their own cookie names and lifetimes, and they can change. We review this table whenever we add or remove a tool.

6 · Your choices

Cookie settings

Choose Cookie settings in the footer of any page to change your choices. You can turn Video & embeds on or off at any time, and Statistics too unless your browser sends a Global Privacy Control signal (see below). Your choice is saved in a cookie called aacsa-consent for six months. After that we ask again.

Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we honor it. Statistics start off and stay off, even if you choose Accept all. Video & embeds follow your choice. You can learn more at globalprivacycontrol.org. Some browsers send a Do Not Track signal. There is no common standard for it, so we do not act on it.

Your browser

You can block or delete cookies in your browser settings. The site still works, except sign-in, the shop cart and payments.

Email and your information

• To stop our emails, use the unsubscribe link in any message, or write to us.
• To see, correct or delete the information we hold about you, email info@sjaacsa.org. We may ask you to confirm who you are first.
• Members can view and update their details in the member dashboard, or ask us to delete their account.
• We will reply within 45 days.
• We may need to keep some records, such as donation records, for tax and accounting reasons. If so, we will tell you.

7 · California readers

California's privacy law (the CCPA, as amended by the CPRA) mostly applies to for-profit businesses. AACSA is a nonprofit, so it generally does not apply to us. We give you the same choices anyway.

• Know: you can ask what personal information we have collected about you and how we use it.
• Delete: you can ask us to delete it, except where we must keep it by law.
• Correct: you can ask us to fix information that is wrong.
• No sale or sharing: we do not sell your personal information, and we do not share it for cross-context advertising.
• No penalty: we will not treat you differently for asking.

To make a request, email info@sjaacsa.org or call (408) 292-3157. You can also use an authorized agent.

8 · How long we keep information

We keep information only as long as we need it for the reasons above, and for legal, tax and accounting duties.

• Messages and applications: we keep them only as long as we need them for the reason you sent them.
• Newsletter: until you unsubscribe.
• Records of gifts, sales and memberships: as long as tax and accounting law requires.
• Member accounts: you can ask us to delete your member account.
• Google Analytics statistics: no longer than 14 months.
• Cookies: for the times shown in the table above.

9 · Children

Some AACSA programs serve young people. A parent or guardian signs up a child under 13. We do not knowingly collect personal data online from a child under 13 without a parent's consent. If you think we have, email info@sjaacsa.org and we will delete it.

10 · Security

We use reputable service providers and limit staff access to what each role needs. Our site uses an encrypted connection. We do not store card numbers. Our payment providers handle them. No system is perfectly secure, so please take care with what you send us.

11 · Links to other sites

Our pages link to partner organizations and other services. Their privacy practices are their own. Please read their notices.

12 · Changes to this notice

When we change this notice, we will update the date at the top. If a change is significant, we will say so on this page. This version is effective October 14, 2026. Questions? Email info@sjaacsa.org.